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ABSTRACT 

We present two methods for the construction of quantum circuits for quantum error- 
correcting codes (QECC). The underlying quantum systems are tensor products of sub- 
systems (qudits) of equal dimension which is a prime power. For a QECC encoding k 
qudits into n qudits, the resulting quantum circuit has 0(n(n — k)) gates. The running 
time of the classical algorithm to compute the quantum circuit is 0(n(n — k) 2 ). 

Keywords: Quantum circuits, quantum error correction. 

1. Introduction 

Most quantum error-correction codes (QECC) have been constructed for quan- 
tum systems that are composed of two-dimensional subsystems — quantum bits or 
short qubits. At first glance, the size of the alphabet used to encode the information 
to be processed seems to be irrelevant. But already in the context of classical infor- 
mation processing and communication this is not true. For example, the entropy of 
a message depends on the alphabet used for the encoding, and increasing the size 
of the alphabet allows the construction of better error-correcting codes [22, 27]. 

In the context of quantum information, a quantum system consisting of two 
three-dimensional subsystems — qutrits — shows new features when compared to a 
two-qubit system. For example, bound entanglement exists only for the former 
[15], and for two qutrits there is even "nonlocality without entanglement" [3]. 

In this paper, we consider quantum systems which have subsystems of dimension 
d = p m , where p is prime. As a shorthand, we will use the term "qudit". Quantum 
codes for qudit systems have been studied, e.g., in [1, 2, 10, 24]. The question of 
encoding and decoding these codes, however, was not explicitly addressed. Here 
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we present efíicient (classical) algorithms to compute efíicient quantum networks 
for the encoding process. The method applies to qubit codes as well, for which 
encoding algorithms have been discussed, e. g., in [6, 11, 12, 13, 14]. 

In thc following section, we present the mathematical framework of quantum 
information processing using composed quantum systems. In Section 3 we recali 
the bàsic concepts and constructions of quantum error-correcting codes. A first 
encoding algorithm for the class of CSS codes is presented in Section 4. The main 
result, an encoding algorithm for stabilizcr codes over higher dimensional quantum- 
systems, is derived in Section 5 and illustrated in Section 6. 

2. Non-binary Quantum Systems 

2.1. Quantum States and Registers 

In the context of classical information processing, information is encoded using 
words over some finite alphabet A, most often A = {0, 1}. The elementary "sym- 
bols" of quantum information processing are states of a finite dimensional quantum 
system. Those can be modeled by normalized vectors in a complex Hilbert space 
H = C d . Again, the simplest case of H = C 2 is considered most often. Then the 
orthonormal basis states of such a quantum bit, or short qubit, are written as |0) 
and |1). (The notation of quantum states as "ket vectors" | • } is attributed to Dirac 
[7]). A general state of a qubit is given by 

\4>) = a|0) + /3|1), where a,/3 e C and \a\ 2 + |/3| 2 = 1. 

If both a and (3 are non-zero, the state \4>) is a so-called superposition of |0) and 
|1) with amplitudes a and /?. For a cí-dimensional system, we label the orthonor- 
mal basis states by the elements of some alphabet of size d, e. g., thc numbers 
{0, 1, . . . , d — 1} or the elements of a finite field, if d is a prime powcr. The general 
state of a qudit is given by 

d-l d-l 

\ip) = Qíj\i), where a, £ C and ^ \ai\ 2 = 1. 

i=0 i=0 

Combining several qudits, we obtain a quantum register. The canonical basis states 
of a quantum register of length n are tensor produets of the basis states of the single 
qudits. Hence we can label them by words x € A n of length n. For the basis states 
of a quantum register we use the following notations: 

\xi) <g> \x 2 ) ® ■ ® \x n ) = \xi}\x 2 ) ■ ■ ■ \x n ) = \xi,x 2 , ...,x n ) = \x). 

A general state of a quantum register of length n is a normalized vector in the 
exponentially large Hilbert space H = (C'')' 8 " = C d ", given by 

I*) = ^ oí x \x), where a^C and |«x| 2 = 1- 

x£A n xeA" 
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When writing states of quantum registers, normalization factors may be omitted. 

The elements of the dual space Tí* will be denoted by "bra vectors" (y\. Then 
the inner product of two vectors \x) and \y) reads (x\y), and linear operators M 
can be written in the form 



M=(M i , j ) = J2M ij \i)(j\- 



As the operations have to preserve the normalization of the vectors, the admissible 
operations are unitary operators, which we will discuss next. 

2.2. Elementary Gates 

In the following we will consider qudit systems where each qudit corresponds to 
a ç-dimensional Hilbert space where q = p m is a prime power. 
Defïnition 1 (Elementary Gates) Let q be a prime power, i. e., q — p m where 
p is prime. By u) we denote a primitive complex p-th root of unity, i. e., lo — 
cxp(27ri/p). Furthermore, let tr(a) denote the trace of an element ot G ¥ q = F p ™ 
which is defined as tr(a) :— Y1T=^ aP ' e Then we define the following opera- 
tions: 



(i) X a := J2\ x + a )( x \ f or a£F q 

(ii) Z P := ^ {Pz) \z){z\for P^¥ q 

z£F q 

(Ui) M 7 := J2 \1V)ÍV\ f° r 7 e ¥ q \ {0} 



(iv) DFT := ^- u tl{xz) \z){x\ 

(v) ADD^ 2 > := \x)i\x + y)2{y\2{x\ 1 

x,ye¥ q 

(vi) HORNER (1 ' 2 < 3) := ^ |a)i \x) 2 \ax + &> 3 <&|3<ar|2<»|i 

Here, when writing oj tT ^ z > , we idcntify F p and Z/pZ, the integers modulo p. Then 
the function XfJ'- z ^ u> tr (' 3z ) is an additive character of F«j. Diffcrent vàlues of (3 
yicld the q different additive characters of ¥ q (see, e. g., [17, 21]). 



DFT 



e- 

(i) (ii) (iii) (iv) (v) (vi) 
Fig. 1. Graphical representation of the elementary gates of Definition 1. 



A graphical representation of thcsc elementary operations — so-called quantum 
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gates — is given in Figurc 1. Each horizontal line corresponds to onc qudit. The firat 
three operations operate on single qudits. A supcrscript in brackets indicates on 

(2) 

which subsystem the transformation acts, e. g., X a = id®X a ®id®...®id. The 
operations X a and M 1 correspond to the addition of a fixed element a e ¥ q and 
the multiplication with a fixed element 7^0, respectively. The operation Zp has 
no direct classical analogue, it changes the phases of the basis states. The Fourier 
transformation DFT can be used to transform the state |0) to a superposition of all 
basis states with equal amplitudes, i.e., 

DFT|0) . ± •£ ,«>. 

v aev q 

Starting from this superposition, a quantum computation can, e. g., evaluate a 
function in parallel for all possible inputs. Arbitrary classical functions over ¥ q 
can be implcmentcd using the gates ADD (1 ' 2) and HORNER (1 < 2 ' 3) . The former 
corresponds to the reversible implementation of the addition of two elements. The 
first qudit is called "control" , the second "target" . The latter is a universal reversible 
gate over ¥ q , as any function over ¥ q corresponds to a polynomial which can be 
evaluated using the Horner scheme. It is the generalization of the so-callcd Toffoli 
gate [26] for qubits, which is universal gate for reversible boolean functions, as well 
as the Fredkin gate [8]. 

3. Quantum Error-Correcting Codes 



3.1. Unitary Error Bases 

In the following, we will recali the bàsic properties and constructions of quantum 
error-corrccting codes. In order to construct an error-correcting code, one has to 
specify an error model. The error model can be specified by a (finite) set £ of error 
operators. In [20], the following characterization of error-correcting codes is givcn. 
Theorem 1 Let C be a subspace of the Hilbert space H with orthonormal basis 
{|ci), . . . , |cr-)}. Then C is a quantum error-correcting code for the error- operators 
£ = {Ei, . . . , E^} if and only if there exists a^,i <E C such that for all |cj), \cj) and 
E k , Ei e £ 

(ci\ElEi\cj) = Sijoikj. (1) 

Most quantum error-correcting codes are designed to correct local errors, i. e., errors 
that effect only some subsystems. The error acting on a single subsystem can be 
any linear transformation. It is sufficicnt that condition (1) holds for a basis of the 
linear space of error operators. For qudit systems of prime power dimension q, wc 
consider the following set of unitary operators: 

£ = {X a Zp:a,/3e¥ q }. (2) 

It is not hard to show that those q 2 operators are an orthogonal basis with respect to 
the inner product (A, B) — tr(A^B). Furthermore, they generate an error group Gi 
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of size pq 2 with center Ç(Gi) = (ojI) (see [18, 19]). Any element of Q\ can uniquely 
be written as uf 1 ' X a Zp where 7 É {0, . . . ,p — 1} and a, (3 <G ¥ q . The commutation 
relations of two elements are derived from 

x&V q zGF, ye¥ q 

= ^ z) \z + a)(z + a\ 

zeF, 

= ^ {z - a)) \z){z\ 
Hence commuting two elements results in a phase factor, i. e., 

(x a z )(x a ,Zp,) = ^ a '^'\x a ,z ,){x a z ). (3) 

For an n-qudit system, the error basis and the error group are the n-fold tensor prod- 
ucts £® n and Q n := Gf n , respectively. The wcight of an error-operator E e £® n 
is the number of tensor factors that are different from identity. If a _fí-dimensional 
subspacc C of (C 9 )®" can correct all errors of weight no greater than t, C is a 
í-error-correcting code with minimum distance 2í + 1, denoted by ((n, K, 2t + 1)). 

3.2. Stabilizer Codes 

A particular class of quantum error-correcting codes are so-called stabilizer codes 
(see [2, 4, 9]). The bàsic idea is to consider an Abclian subgroup S of the error 
group G n such that its intersection with the center of Gn is trivial. The stabilizer 
code C is defincd as the common eigenspace of the operators in S. Stabilizer codes 
can be described in terms of certain classical codes over finite fields. 

Any element E of the error group Q n can uniquely be written as 

E = uj\X ai Z fjl ) ® (X a2 Zp 2 ) ® . . . ® {X an Z 0n ) =: ^X a Z , 

where 7 è {0, ...,p- 1} and a = (ai, a 2 , . . . , a„), = (/3i,/?2, • • • ,Pn) & F™. The 
weight of an element X a Zp is the number of indices i for which not both and 
[3i are zero. From the commutation relation (3), it follows that for (a, /?), (a',/3 1 ) £ 
F" x F™ 

(A Q ^)(A a ,^) - J a ^< a '^'\X a ,Z í3l ){X a Zp), 
where the inner product * is defined by 

n 

(a, 0) * (<*', /?') := £ tr^ft - Oi#). (4) 

i=l 

This shows that the group Q n := Q n /(wl) is isomorphic to F™ x F™. Furthermore, 
two elements X a Zp and X a iZp' commute if and only if (a, (3)*(a',(3') = 0. Hence an 
Abelian subgroup S of Gn corresponds to a subspace C of F^ x F™ that is contained 
in its dual C* with respect to the inner product (4). 
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Definition 2 (Stabilizer Matrix) Let S be an Abelian subgroup of ' Q n which has 
trivial intersection with the center ofÇ n . Furthermore, let {31,327 ■ ■ ■ ,9n~k} where 
Çi = uf 1i X CXi Zji i with 7í <G {0, ... ,p — 1} and (ai, (3i) £ F™ x F™ be a minimal set of 
generators for S. Then a stabilizer matrix of the corresponding stabilizer code C is 
a generator matrix of the (classical) linear code C Ç F q l x F™. We will write this 
matrix in the form 



( 



Cil 

a 2 



\ ct n -k 



fií 

P2 



\ 



-k)x2n 



Pn-k ) 



Any error operator E that does not commute with all elements S G S will change 
the eigenvalue of an eigenstate \ip) of S which can be detected by a measurement. 
Recali that E = X a Zp docs not commute with all 5* € S if and only if (a, (3) ^ C* . 
Finally, the minimum distance of a stabilizer code is the minimum weight of the 
vectors (a, (i) £ C* \ C, since the errors corresponding to C* are those that cannot 
be detected, and the operators corresponding to C have no effect on the code. 



4. Encoding CSS Codes 

A special class of stabilizer codes are so-called CSS codes named after Calder- 
bank, Shor [5] and Steane [25]. Originally, they have been designed for qubit sys- 
tems, but they can easily generalized to any dimension (see, e. g., [1]). Given two 
linear codes C\ — [n, d\} q and C 2 = [n, fc 2 , d 2 ] q over ¥ q with C 2 Ç Ci, the basis 
states of the corresponding CSS code are 



1 



E 

cecï 



\c + w), where w e C\. 



(5) 



Two states \ip w ) and \ip w ') are identical if and only if w — uu' e C 2 , otherwise they 
are orthogonal. As the dimension of C 2 is n — fc 2 , there are q k different cosets where 
k = ki + k 2 — n. Hence the dimension of the CSS code is q k . Its minimum distance 
is d > min(<ii, d 2 ). 

We illustrate the encoding of a CSS code for the code [7, 3, 3]s over seven 8- 
dimensional quantum systems. Let a e Fg be a primitivc clement of F§ with 
minimal polynomial ii a (X) = X 3 + X + 1. The code C = [7, 2,6]s with generator 
matrix 

G 



1 oe 3 1 a 3 a a 



ot 



is containcd in its dual C 



H 



1 a 4 1 
[7, 5, 3] with generator matrix 



/ 1 





a 3 


1 


a 3 


a 


a 







1 


a 4 


1 


a 5 


a 5 


a 4 










1 








a 3 


a b 













1 





a 


a 5 




V 











1 


a 


a A 


) 



G 



The first two rows of H are equal to G. The cosets of C^/C are given by linear 
combinations of the last three rows. Dcnoting thc rows of H by hi, h 2 , • • • , h$, we 
can rewrite equation (5) as 

\4>a,b,c) = — 7= \ihi+jh 2 + ah3 + bh4 + ch 5 ), 
vl' i,je¥ s 

where a,b,c e Fg. Applying a Fourier transformation to the first and second qudit 
of the initial state |00)|a)|6)|c)|00), we obtain 

l E |i>|j>|a>|6>|c>|00). (6) 

i,jev 8 

Now we sequcntially add the corresponding múltiple of the rows of H in reverse 
order, i. e., starting with /15. As H is in row echelon form, this corresponds to a 
sequence of modificd ADD gates — instead of adding the first qudit to the second, 
we have to add a múltiple of it. The resulting encoding circuit is shown in Figure 2. 
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Fig. 2. Encoding circuit for thc CSS codc [7, 3, 3]s- The Fourier transformation 
DFT is abbreviated by F, and for the gate M a we give only the value of a. 



For each row hk of H, we have a sequence of gates ADD^'^ corresponding to the 
non-zero entries Hki for k ^ l. The gate ADD^ fe '^ is conjugated by a multiplication 
gate M 7 where 7 = H^i- Note that we have not combined adjacent multiplication 
gates. In general, G is a generator matrix of Ç Ci, and ií is its completion to 
a generator matrix of C\. Using the construction illustrated above, we get 
Proposition 1 Let C\ = [n,ki,di] q and C2 — [n, ^2,^2]^ be linear codes over¥ q 
with C2 Ç Ci . Then there exists a quantum circuit to encode the resulting CSS code 
C = [n, fe, dj q over qudits of dimension q, where k = k\ + &2 — n, using n — k 2 DFT 
gates, at most A := k\n— ( 1 2 fl ) ADD gates, and at most A+(n—l) multiplication 
gates. 

Proof. To create a state similar to (6), we need dimC^ = n — k 2 DFT gates. A 
generator matrix H for C\ has fci rows. Hence the number A of ADD gates is at 
most k\n. As H can be chosen to be in row echelon form, we have k\ entries that 
are one. Those correspond to the control qudits. Furthermore, at least entries 
of H are zero, reducing the number of ADD gates further. Finally, each ADD gate 
is conjugated by a multiplication gate. Adjacent multiplication gates between thc 
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ADD gates can be combined, so we count only the multiplication gates before the 
ADD gates, plus at most n — 1 multiplication gates at the end. □ 
As the ròle of C\ and C2 in the construction of CSS codes is completely symmet- 
ric, one has the freedom to choose the matrices G and H to be generator matrices 
of either and C\ , respectively and C2 ■ This may reduce the number of gates 
by a constant factor, as well as optimizing the particular generator matrices. 

5. Encoding Qudit Stabilizer Codes 

In this section we derive an encoding algorithm for general stabilizer codes over 
qudit systems of primc power dimcnsion q — p m . The main idea is to transform 
the Abelian stabilizer group S Ç Q n of the stabilizer code C — \n, k, dj q into a 
stabilizer group So for which encoding is particularly easy Up to a permuta- 
tion 7T G S n of the qudits — which we may ignorc in the sequel — , that group is 
Sq ■= {Z^\ z[ 2 \ . . . , z[ n fe · ) ). The corresponding stabilizer code Cq cannot cor- 
rect single qudit errors at arbitrary positions as the common eigenstates of So are 
tensor products of the fixed (n — fc)-qudit state |00. . .0) and the unencoded state 
|0 in > e (C d )® fc , i. e., they are of the form 

|OO...O)|0 in ) e (C d )® n . (7) 

As the stabilizer groups S and So are conjugated to each other there exists a trans- 
formation D such that 

D'^SD =7r {Z {1 \ Z {2 \ Z {n - k ^) = So, (8) 

where denotes equality up to the permutation tt of the qudits. Combining (7) 
and (8), it follows that the states D _1 (|00 . . . 0)|</>i n )) are common eigenstates of 
S. Hence the transformation D^ 1 can be used to encode that states of C. In the 
following, we show that the transformation D can be cfhcicntly decomposcd into 
single qudit transformations and ADD-gates. 



5.1. Conjugating the Error Basis 

First we consider the operation of the Fouricr transformation over the additive 
group of the field F q (see Definition 1 (iv)) on the error group modulo the center. 
The action on Zp is given by 

DFT-%DFT = ^- w~ trW) |i>0'l Yl u tl{Pz) \z)(z\-j: ^ tr{kl) \k) {l\ 
v q i,jew q zew q v q k,iew q 



q i,ier q jev q 

= 7, E z2« tT{{l - i+m m\ 



i,ie¥ q je¥ q 
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Similarly, 



DFT" 1 X a DFT = -L Y, "- tl{ii) \i)(j\ E I* + 7= E w tr W|fc)</| 



- E E ^ _tr(ï(x+a)) ^ tr(a:í) K>(íi 

9 i,Z6F„ zGF, 

1 ^ w tr(- M )^ w tr W M)| l)(í | 

E wtr(_fa ) N><i| = -z-- a 



íeF, 

As any element of G\ corresponds to a row vector (a, (3), we can describe the action 
of DFT on Qi as the linear transformation DFT := ( J ~^ ) . 

Next we investigate the action of the matrix M 7 corresponding to the multipli- 
cation with 7 E W q , 7 7^ (sec Dcfinition 1 (iv)). We compute 

M-^zpM^ = e i»><7»i E i* + a )< x \ E w^kx^i E i-y«x«i 

y£¥ q x<EF q z£¥ q vÇ_¥ q 

= E \v)<™\ E n+«x»i E ^ T{0JV) M(v\ 

ye¥ q x£¥ q v£W q 

= E \i- 1 y){y\Y.^ (í3 ' ,v) \^ + a )^\ 

y€¥ q v£F q 
= Y ujtl{ ' 3lV) \ v + ^ la )( v \ 

v£W q 



= E i x + 7 _la )( a; i E w tr(/37z) N)<^i 

xeF, zeF, 

Hence, M 7 acts on (a,/3) as M 7 := 7 )- 

For the next operation, we have to distinguish the cases whether g is odd or q 
is even. If q is odd, we define the operator 

p 7 -.= Y"~ tT{hy2) \y)(y\ ( 9 ) 



which commutes with Z^. Furthermore, X a acts on P 1 1 as follows: 

x€¥ q y£¥ q zGF, 

= Y" tI(hiv+a)2) \y)(y\ 



yew q 



zSF, iyGF 9 
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Equivalently, we get 

P" 1 X a P 7 = ^^x a z ia . 

Hence P 7 acts on (a,f3) as P 7 := (ï |). 

If g is even, we have to use another definition for the operator P 7 as we cannot 
divide by two. For this, we fix an arbitrary self-dual basis B — {61, . . . ,b m } of 
F q = F2™ over F2 (see e. g., [17]). Hence, by definition, tr(òjòj) = Síj. Any element 
cteF, can uniqucly be written as Y^iL·i a i^i where aj € F 2 . The coefficients ai are 
given by ai — tr(bia) since 

mm m 

tr(ò;a) = tr(6i ^ o^) - 51 a i tr (Mj) = S a ^ = a " 

Lemma 1 Let q = 2 m and let B = {bi, . . . , b m } be an arbitrary self-dual basis of 
¥ q over F 2 . Furthermore, we define an integer-valued function on ¥ q as 

wgt : ¥ q -» Z, a h-> |{j : j e {1, 2, . . . , m}| tr(aò,) ^ 0}|. 

T/ien í/ie following holds for all a,y € F g : 

^wgt(j,+a) _ ^wgt(a)^wgt(y)^_j^tr(a!!/) 

w/iere í G C wií/i í 2 = — 1. 

Proof. First we observe that wgt(y + a) = wgt(y) + wgt(a) — 2\{j : yj = aj = 1}|. 
Second, the size of this set modulo two is given by 

(/ m \ / m \\ m m 

( a J b J ) ( Y Vkhk ) = H a 3 Vk tr ( 6 J" Ò fe) = Y a 3 y 3> 

which completes the proof. □ 
Now we are ready to define an operator Pi as 

m 

p, : = J2(-i) wst{v) \y)(y\ = E nH^Mü/l- 

Again, Pi commutes with all matrices Z@. The action on X a is derived from 

x-^p- l x a = J2\x){x + a\Y / i wst{y) \y)(y\Y\ z + a ^ z \ 

zGF, y£¥ q zSF, 

= E ïWgt(í/+Q) i^^i 

ye¥ q 

= z wgt(Q) E (-i) tr ( az )|z)(z| Y iWSt(v) \y)(y\ 

z£¥ q y£¥ q 

= i w ^Z a P^. 

Hence 

P^X a P x = Í«*Mx a Z a . 
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Finally, for any 7 G ¥ q , 7 7^ 0, we define P 7 as 



P 7 := M^PiM^ where 7o 2 = 7. (10) 

(Note that 70 is uniquely defined asim 2 is an automorphism of F 9 = F 2 m.) The 
matrix M 7 is a permutation matrix, hence P 7 is diagonal and commutes with Zp. 
The action of P 7 on X a is given by 

P- 1 X„P 7 - M-^P^M^XaM-iPiM^ 
= M- o H^^X aia Z aio M 10 

— ,-wgt(a7o) y 7 

— í vl q Z/ q7 2 

_ . ,-wgt(a7o) v 7 

Summarizing, the operators P 7 (defined by (9) for q odd and (10) for q even) 
acts on (a, (3) always as P 7 := ( J ^ ) . 

Altogether, we have shown 
Theorem 2 The group Jv q := (DFT,P 7 ,AÍ 7 : 7 e F*) acts on Gi, the error group 
Q\ modulo the center, as SL(2,¥ q ). 

Proof. The action of the matrices DFT, P 7 , M 7 on the error group Gi is given by 

respectively. These matrices generate SX(2,F 9 ) (see, e.g., [23]). □ 
As SL(2,¥ q ) acts transitively on the non-zero vectors (see, e.g., [16]), we obtain 
Corollary 1 The group Jr q acts transitively on the non-trivial elements of Gi ■ 

So far, we have only considered the action of single qudit operations on the error 
group Gn- Our goal is to transform an arbitrary Abelian stabilizer group S Ç Gn 
into Sq which corresponds to the code Cq = \n, k, 1]. As Cq cannot correct errors and 
single qudit operations do not change the crror-correcting properties of a stabilizer 
code, we need additional transformations which are ADD-gates acting on pairs of 
qudits. Combining the definitions of X a and ADD^ 1 ' 2 ** (see Dcfinition 1 (i) and 
(v)), we can rewrite the ADD-gate as 

ADD^ 1 ' 2 ) := £ \*)i\* + vh(vU(*\i 

x,ye¥ g 

= J2\a)(a\®X a . (11) 

ae¥ q 

Using (11), it is easy to show that ADD*- 1 ' 2 -* commutes with all matrices of the form 
Zfa ® X a2 . 
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For elements of the form X ai <g) Zp 2 we get 
(ADD* 1 - 2 ))" 1 ^ ® Z^JADD^ 1 ' 2 ) 



= (ADDÍ 1 ^)- 1 Y, ^ {í32w) \v + a 1 ) 1 \w) 2 {w\ 2 {v\ 1 ]T + y) 2 (vHx\ 1 

= (ADD^ 1 ^)- 1 J2 ^ tr(/32(a;+? ' )) k + «i>ik + y>2(2/|2(x| 1 

= X! \v)i\w)2(v + w\ 2 {v\i ^ {Mx+v)) \x + a 1 ) 1 \x + y) 2 {y\ 2 {x\ 1 

v,w£¥ q x,y& q 
x,y<£F q 

= {X ai Z th )®(X_ ai Z [h ). 
This proofs 

Lemma 2 The trans j brmation ADD^ 1 ' 2 -* acts on ((a\, f3i), (a 2 , f3 2 )) as 

-(1,2) /io-io 



Ar>n — o i o o 

AUU •— I 1 1' 

V o i o i/ 

i. e., (3 2 is added to (3\ and ai is subtracted from a 2 . 

5.2. Encoding Algorithms 

With this preparation, we can formulate our algorithm to efficiently computo 
emcient quantum circuits for the encoding of stabilizer codes. 

Theorem 3 Let C = [n, k, dj q be a stabilizer code for a qudit system of prime 
power dimension q = p m with Abelian stabilizer group S Ç Q n and stabilizer matrix 

(x\z) eF ( íl - fc)x2íl . 

Then the algorithm shown in Figure 3 (on page 13) computes a decoding circuit 
D for C with at most n(n — k) — ( n ~ 2 +1 ) ADD gates and 0(n(n — k)) single qudit 
gates of type DFT ; P 7 , or M 7 . 

The running time of the algorithm itself is 0(n(n — k) 2 ). 
Proof. We show that the algorithm computes a transformation D such that 
D~ 1 SD =ir So (see eq. (8)). Instead of operating on the stabilizer group S itself, 
we use the stabilizer matrix representation. So our goal is to find a transformation 
D such that 

(X\Z)D =7r (0|A0), where A e ¥ ^-k)x(n-k) hag M1 r£mk ^ 

In order to obtain a more compact graphical representation of the final quantum 
circuit, we will first transform the stabilizer matrix first into the form 

(X\Z)D' = n (A0\0), where A e ¥ (^-k)x(n-k) hag m mnk ^ ^ 

and use (n — k) local Fourier transformations to exchange the X- and the Z-part 
of the stabilizer matrix. 
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Input: a stabilizer matrix (X\Z) i F<™ fe)x2n 

Output: a decoding transformation D := F ■ A n - k T n - k ■ . . . ■ A 2 T 2 ■ A{Ti 

1 L <- 

2 foreach row i = 1 to n — k do 

3 foreach column j = 1 to n do 

4 if (Ay,Zy) ^ (0,0) then 

5 find a transformation Ty G Jf 9 such that (Xij, Zij) ■ Ty = (1,0) 

6 foreach row l = i to n — k do 

7 (Ay , Zy ) <- ( Ay , Zy ) • Ty 

8 end for 

9 else 

10 Tij <- id 

11 end if 

12 end for 

13 T^T^Tg®...®^ 

14 find the first column / ^ L whcre Xa ^ 

15 includc l into L 

16 Ai <- icí 

17 foreach column j = 1 to n do 

18 iï l ^ L and Xy = 1 then 

19 Aj <- • ADD (ÍJ) 

20 foreach row /i = i to n — k do 

21 {X^j.Z^j) <— - Xy, Z w - + Zy) 

22 end for 

23 end if 

24 end for 

25 end for 

27 return (F, A„_ fc , T„_ fc , . . . , A 2 , T 2 , Al, Ti) 

Fig. 3. Algorithm to compute a decoding circuit for a qudit stabilizer code. 



We prové the correetness of our algorithm by induction over í, corresponding 
to the loop steps 2-25. The induction hypothesis is that the first i — 1 rows of 
the stabilizer matrix are, again up to a permutation of the columns, in the form 
(Aj_i0|0), whcre A is an (i — 1) x (i — 1) matrix of full rank. 

After the loop steps 3-12, the Z-part of the i-th row of the stabilizer matrix will 
be zero. From Theorem 2 and Corollary 1 it follows that in step 5 we can always find 
a transformation Ty e Jf q with the desired property. The loop steps 6-8 updates 
the stabilizer matrix. In step 13, we combine the transformations applied to each 
qudit to a transformation on all qudits. The definition of the stabilizer matrix (sec 
Dcfinition 2) implies that it has full rank. Hence in step 14, we will always find a 
column l with a non-zero entry Xn. That column will be recorded in step 15. Then 
the loop steps 17-24 searches for columns j ^ L whcre Xy is non-zero. Applying 
an ADD-gate with control l and target j will change those positions Ay to zero. 
The loop steps 20-22 updates the stabilizer matrix accordingly. So after step 24, 



13 



only the entries Xu for l e L may be non-zero, all other entrics in the i-th row of 
the stabilizer matrix are zero. This completes the induction step from row i — 1 to 
row i. 

After step 25, the Z-part of the stabilizer matrix is zero, and only the n — k 
columns l € L of the A-part are non-zero. Applying the transformation F, i. e., local 
Fouricr transformations at those positions, yields the stabilizer group So, completing 
the proof of the correctness of our algorithm. 

The running time of the algorithm follows directly from that fact that at most 
three for-loops are nested, two of them iterating over the n — k rows, one over the 
n columns. 

Each of the n — k transformations Aj is a product of at most n — j ADD-gates. 
Hence the total number of ADD gates is at most Y^jZi ( n ~ j) = n ( n ~ — (™~2 +1 ) ■ 
Each of the n — k transformations Tj is the product of O(n) single qudit opcrations. 
Together with the n — k local Fouricr transformations DFT in the transformation 
F, the number of single qudit gates is 0(n(n — kj). □ 

Note that, in contrast to the situation of qubits, for q = p rn , p > 2, the ADD- 
gate over F 9 for q = p m , p > 2, is not its own inverse. So a different graphical 
representation for ADD -1 is required. For simplicity, we have not introduced such 
a representation. This is also the main reason why we do not directly compute the 
transformation D of (12), but decompose it as D — F ■ D' (see eq. (13)). 

It is not difficult to modify our algorithm such we may save the final n — k local 
Fouricr transformations. In step 5, we have to find a transformation e Jp q such 
that (Xij,Zij) ■ Tij = (0, 1). Furthcrmore, we have to replace the ADD-gates by 
inverse ADD-gates. The modified steps of the algorithm are: 

5' find a transformation Tij G Jw q such that (Xij, Zíj) ■ Tij = (0, 1) 

19' A t <- A t ■ (ADD" 1 )^') 

20' foreach row \i = i to n — k do 

21' {Xn^Zpj) <— {X M + Xi^Z M - Zij) 

22' end for 

6. Example 

We illustrate the algorithm of Figure 3 using a quantum code over qutrits. A 
stabilizer matrix of the code C = [9, 5, 3] 3 is given by 

2 1 2 2 1 1 \ 

1 2 1 1 2 2 

1 2 1 2 1 2 ' 
1 2 1 1 2 2 / 

In the first step, we transform each pair («,, of the first row that is non-zero to 
(1,0). This is achieved by the transformation 

Ti = id®id(E) M 2 DFT <g> P 1 M 2 ® P x ® P 2 M 2 ® M 2 ® DFT ® P 2 . 



(X\Z) = 



( 1 2 1 2 2 1 

1 1 2 2 2 1 

2 1 2 2 1 1 

\ 1 2 1 1 2 2 
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The resulting stabilizcr matrix is 

000000000\ 

1 2 1 1 2 2 

1 2 2 2 1 1 2 1 
110 2 1110/ 

The first non-zero column is the first one. So using the transformation 
we obtain 

000000000\ 
1 2 1 1 2 2 
2 2 2 1 1 2 1 
110 2 1110/ 

Note that the first column of the Z-matrix is zero. This follows from the fact that 
the corresponding stabilizer elements commute with the X^ which corresponds to 
the first row. 

In the next step, we use the transformations 

T 2 := id(g>id(g> P-yMï ®P x ® DFT <g> P 2 <g> id <g> P 2 M 2 <g> M 2 DFT 

and 

A 2 := ADD^^ADD^^ADDÍ^^ADD^^ADD^^'ADD^^ADDÍ 2 ' 9 ) 
to obtain 

000000000\ 
000000000 
1 1 1 2 1 
1 1 2 2 1 2 2 / 

Using the transformations 

T 3 := id®id® M 2 <g> Pi M 2 ® P x M 2 ®id® DFT <g> P 2 M 2 <g> P X M 2 

and 

A 3 := ADD' 3;4 ^ADD' 3,5 ^ADD' 3 ' 6 ^ADD* 3 ' 7 ^ADD' 3 ' 8 ^ADD* 3,9 ^ 

yields 

000000000\ 
000000000 
000000000 ' 
1 2 2 1 1 / 

For the last row, we use the transformations 

T 4 := id®id®id® P 2 ® M 2 DFT ® P x ®id® P X M 2 ® P X M 2 



(X\Z) 



( 1 1 1 1 1 1 1 1 

'012101120 

1 2 2 1 1 1 
\ 1 1 1 2 2 



(X\Z) 



/100000000 

12 10 112 
1 2 2 1 1 1 
\ 1 1 1 2 2 



(X\Z) 



/100000000 
010000000 
002221022 
\002122000 



(X\Z) 



/100000000 

'010000000 

001000000 
\ 1 1 1 2 2 
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and 



and get 



A, := ADD^^ADD^^ADD^ADD^ 9 ) 



1 
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(X\Z) = 



Note that after the first three steps, we have L = {1,2,3}. Hence not the third, but 
the fourth qudit is the control qudit for the ADD gates of the last row. Equivalcntly, 
we could have subtracted the third row from the fourth to obtain X^^ = 0. The 
stabilizer group would not have changed as the addition of onc row to anothcr 
corresponds to multiplying one generator by another. 

Finally, a Fourier transformation on the first four positions transforms the sta- 
bilizer group into the form 5 = (z[ 1} , z{ 2 \ z{ 3) , z[ 4) ). 
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Fig. 4. Dccoding circuit for the ternary quantum code C = [9,5,3]3. The 
Fourier transformation DFT is abbrcviatcd as F. 



The complete dccoding circuit is shown in Figurc 4. Rcvcrsing the order of the 
gates and replacing each gate by its inverse yields a quantum circuit for encoding. 



7. Conclusions 

The quantum circuits for both CSS codes and general stabilizer codes over qudit 
systems of prime power dimension resulting from our algorithms have a similar 
structure. They consist of an alternating sequence of singlo qudit gates and ADD- 
gates with the same control qudit. The total number of gates is always at most 
quadratic in the number of qudits. For CSS codes, the single qudit gates are cither 
Fourier transformations or multiplication gates, which arc trivial for the case of 
qubits. Furthermore, some optimizations are possible by interchanging the róle of 
the two classical codes involved. 

The algorithm of [6], respectively the modified version of [11, 12], to compute 
quantum circuits for the encoding of qubit stabilizer codes can also be generalized 
to non-qubit stabilizer codes. It turns out that the resulting quantum circuits have 
again the same structure and complexity as those presented in this paper. The 
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approach presented here, however, has the advantage that the transformation D 
used to conjugate the stabilizer group S to So can also be used to compute "encoded 
gates" which preserve the code C. Conjugating gates from the error-group which 
preserve the code Co by D results in transformations that are also in the error- 
group and preserve the code C. As those transformations consist only of singlc 
qudit operations, they can be used for fault-tolerant quantum computation. 
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